CVE-2026-114180
CVE-2026-114180 · WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
metform
- Versions
- ≥ 0, ≤ 4.3.2: Affected; ≥ 4.3.3: Not affected (custom)
Update to 4.3.3